$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2a7a8aa8-5648-3b56-98c7-861b9b22e21e.roa File: 2a7a8aa8-5648-3b56-98c7-861b9b22e21e.roa (raw, json) Hash identifier: 7NTUgO0HAcC3M3dw3fC77fCWFtSD1ZRH54GcvB2tvr8= Subject key identifier: 0D:4C:B2:D1:B5:84:06:61:4D:4A:CA:80:07:DE:0E:88:F7:FD:4E:30 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19FD7BFA56F9248C95C9C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2a7a8aa8-5648-3b56-98c7-861b9b22e21e.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 66.110.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:fd:7b:fa:56:f9:24:8c:95:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=2df71a3c-75c9-477a-b436-c50ce0c95356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:e7:55:68:1c:82:a4:f6:86:7a:94:b8:8f: ef:e5:5a:f1:da:73:bc:d7:b9:3d:9c:c7:17:9d:d4: 84:43:4e:2c:e8:8c:67:09:e1:2e:d1:c3:7e:f2:cd: b3:6c:a8:1e:03:e2:0e:49:ed:1b:0f:4a:a4:b6:03: 77:6f:9f:14:d2:15:f4:50:79:14:bc:90:7b:3e:94: e4:83:9f:97:c7:e4:c6:18:f1:81:96:45:b6:76:69: cc:e5:16:54:72:34:b9:a9:37:ed:b5:8e:fc:d2:36: c2:93:29:04:a7:d7:37:a6:47:63:9e:ca:5b:d6:16: 37:f3:a9:f6:8f:1a:d1:93:ad:ce:11:e9:a0:80:de: ce:a0:44:12:98:99:32:3f:9f:1c:11:56:65:9c:fd: 83:80:29:3d:69:5b:e4:83:97:9f:dd:20:7c:7c:60: 4a:cc:22:99:1b:7b:09:98:13:59:f1:ed:16:67:3c: 61:b8:6d:4d:37:2c:19:12:3b:8b:6c:34:d7:4f:d0: 1c:04:9b:d3:77:f7:78:cd:56:f1:4f:d3:74:00:03: 0c:1e:b0:e7:3d:ef:36:c5:25:93:b1:c1:8a:e0:e3: f0:40:8a:e8:7f:c5:c6:36:25:1f:ad:bb:41:68:3e: fb:af:a9:97:15:79:a9:16:4c:18:71:c5:95:33:0e: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:B2:D1:B5:84:06:61:4D:4A:CA:80:07:DE:0E:88:F7:FD:4E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2a7a8aa8-5648-3b56-98c7-861b9b22e21e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 66.110.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0c:fd:e8:f9:5c:bf:09:2a:b5:af:92:68:56:8a:2b:64:79: 9c:8a:39:50:71:53:02:84:79:2f:f2:3f:c2:12:44:a6:b6:f8: 91:42:d9:b4:e5:db:54:8f:69:7d:88:1b:38:46:5c:38:25:d3: 1f:0b:40:3d:dd:86:5a:fa:5d:6a:ec:85:de:32:b3:fc:ff:d8: 8b:31:04:57:11:01:2a:fe:10:89:67:ff:a3:e8:6f:30:fe:6a: b7:96:9d:65:00:e8:c3:ed:88:60:fa:b8:9f:f5:17:dc:f6:a8: 71:12:25:5a:7a:3f:a2:93:20:de:25:cf:1a:8c:85:f6:0b:21: 44:e7:2d:da:5d:bd:7a:38:08:58:85:c9:31:1f:70:ee:da:90: 86:0a:3d:0a:38:df:1d:1a:50:b9:1c:91:17:15:87:66:86:e7: 3e:dc:f3:48:70:a2:70:08:fa:a7:fd:f7:21:0a:08:87:b9:7c: 33:47:82:1d:80:ff:49:4e:18:cc:c3:5a:ee:d4:cd:2c:af:60: 27:ed:62:8f:63:48:5c:3f:a1:6e:2e:7a:d6:af:4d:15:fb:29: 73:e7:37:36:4b:2b:62:57:ec:29:81:2b:65:5b:1f:4b:ed:7a: 2a:bf:61:bb:d3:c5:a4:eb:27:31:89:33:a3:d6:c5:ed:b3:98: d2:2d:e1:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGf17+lb5JIyVycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MmRmNzFhM2MtNzVjOS00NzdhLWI0MzYtYzUwY2UwYzk1MzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYXnVWgcgqT2hnqUuI/v5Vrx2nO817k9nMcX ndSEQ04s6IxnCeEu0cN+8s2zbKgeA+IOSe0bD0qktgN3b58U0hX0UHkUvJB7PpTk g5+Xx+TGGPGBlkW2dmnM5RZUcjS5qTfttY780jbCkykEp9c3pkdjnspb1hY386n2 jxrRk63OEemggN7OoEQSmJkyP58cEVZlnP2DgCk9aVvkg5ef3SB8fGBKzCKZG3sJ mBNZ8e0WZzxhuG1NNywZEjuLbDTXT9AcBJvTd/d4zVbxT9N0AAMMHrDnPe82xSWT scGK4OPwQIrof8XGNiUfrbtBaD77r6mXFXmpFkwYccWVMw6N7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1MstG1hAZhTUrKgAfeDoj3/U4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmE3YThhYTgtNTY0OC0z YjU2LTk4YzctODYxYjliMjJlMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQm6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkM/ej5XL8JKrWvkmhWiitkeZyKOVBxUwKEeS/yP8ISRKa2+JFC2bTl 21SPaX2IGzhGXDgl0x8LQD3dhlr6XWrshd4ys/z/2IsxBFcRASr+EIln/6PobzD+ areWnWUA6MPtiGD6uJ/1F9z2qHESJVp6P6KTIN4lzxqMhfYLIUTnLdpdvXo4CFiF yTEfcO7akIYKPQo43x0aULkckRcVh2aG5z7c80hwonAI+qf99yEKCIe5fDNHgh2A /0lOGMzDWu7UzSyvYCftYo9jSFw/oW4uetavTRX7KXPnNzZLK2JX7CmBK2VbH0vt eiq/YbvTxaTrJzGJM6PWxe2zmNIt4Rw= -----END CERTIFICATE-----Generated at Fri Mar 13 23:54:17 2026 by rpki-client